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Million Mask March 

(U//FOUO) The Million Mask March on November 5, 2013, also referred to as OpNov5th, is an 
international Anonymous-organized event in honor of Guy Fawkes Day in the United Kingdom. 
Anonymous advertises the march as a peaceful demonstration, which is protected by the Constitution, 
drawing attention to causes ranging from basic human and civil rights to grievances against the current 
“oppressive and tyrannical government.” Anonymous actors are organizing demonstrations in over 150 
US cities. 

(U//FOUO) The NJ ROIC recognizes that Americans have constitutionally protected rights to 
assemble, speak, and petition the government. The NJ ROIC safeguards these First Amendment rights, 
noting that violent extremists could disrupt legal activities, interfering with otheiwise peaceful events. 

(U//FOUO) While this is supposed to be a peaceful protest, Anonymous indicates they are prepared for 
the “same type of unprovoked violence from law enforcement that happened during the Occupy 
rallies.” No threats of violence have been made; however, Anonymous is preparing their own "medical 
teams" to treat demonstrators who may be injured in the event of law enforcement intervention. 
Additionally, law enforcement should be aware of participants using mobile phones to record 
interactions with law enforcement and other authorities. Some smartphone applications can 
automatically broadcast the recordings online or make the phone appear to be off by displaying a black 
screen while recording. 

(U//FOUO) On October 28, 2013, Anonymous released a YouTube video 

('www.voutube.com/watch?v-3HRd 16GCaJc ) with a message to the Washington, D.C., police stating 
that if there are unlawful arrests of protestors, or if police interfere with protestors who are recording 
the event, Anonymous will target their “servers, phone lines, emails, and whatever else they can find.” 
While this message is specific to the Washington, D.C. march, law enforcement agencies should 
consider it applicable to other Million Mask March locations. 

New Jersey Nexus 

(U//LES) Information received regarding these planned actions indicates that in New Jersey, Trenton 
(Mercer Co.) and Paterson (Passaic Co.) have potential demonstrations scheduled. The NJ ROIC has 
no further information on these potential actions at this time. For further information, please see the 
links below: 

• https://www.facebook.com/events/211345435709216 / 

• https://www.facebook.com/events/142342142622164/ 
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OpForTheLuIz 

(U//FOUO) In addition to the Million Mask March, members of Anonymous posted OpForTheLuIz, 
targeted towards individuals who conduct cyber attacks for personal entertainment, or “lulz.” The. 
video advocates attacking "whoever you want on November 5th with whatever means necessary to 
take down your target." An OpVendetta demonstration is also planned for November 5 th around 
London, England, and includes some generic threats of cyber attacks. While both of these operations 
may include cyber attacks, they are not organized efforts and Anonymous members or affiliates have 
posted no US targets or tactics. If cyber attacks are conducted on November 5 th , they will likely be 
disorganized and on a small scale. 

(U//FOUO) For further information, please see the links below: 

• http://www.digitaliournal.com/article/358356 

• http://www.digitalioiirnal.com/article/358726 

• http://www.youtiibe.com/watch7vHGlGDeFcdo8 

• http://www.youtube.com/watch?v=4 01 OFXrl B8 

• h ttp://www. mi 11 ionmaskmarch.org (NOTE: This is an Anonymous website; NJ ROIC does not 
recommend accessing it from respective agency computers due to the possibility of 
Anonymous monitoring visitors and/or compromising visiting computers with malware.) 

Recommendations: 

(U//FOUO) The NJ ROIC recommends the following actions: 

• Remind users not to visit un-trusted sites or follow links provided by unknown or un-trusted sources 

• Remind users to be cautious when clicking on links in emails coming from trusted sources 

• Ensure anti-virus is installed and definitions are up to date 

• Ensure patches and updates are installed for operating systems and applications 

• Run regular vulnerability scans against the network and web applications 

• Ensure law enforcement authorities are aware of the planned demonstration site and the potential for 
antagonistic behavior and cover recording 

Suspicious Activity Reporting 

(U//FOUO) Please report suspicious activity, including cyber incidents, immediately per existing 
protocols. Activity can also be reported 24 hours a day to the NJ ROIC Counter Terrorism Watch at 
(866) 4-SAFE-NJ (866-472-3365) or tips@nihomelandsecuritv.gov . 

Contact Information 

(U//FOUO) Any agency with further information regarding this issue should contact the NJ ROIC at 
(609) 963-6900, option 1, or roic@gw.nisp.org . Questions about this product cam be directed to the NJ 
ROIC at (609) 963-6900, ext. 6243, or niroicanalvsis@gw.nisp.org . 
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Anonymous: New Jersey Police Likely an Enduring Target 

April 13, 2015 

The international hacktivist group Anonymous probably will continue to release personal 

information online—a tactic known as "doxing"—of New Jersey law enforcement officers it 

perceives use excessive force, as it did last week against Vineland police personnel. 

Anonymous in recent months also targeted police and government representatives in 

Cleveland and Ferguson following alleged police brutality. 

- On 6 April, Anonymous posted a YouTube video threatening retaliation against the 
Vineland Police Department for the 31 March arrest and subsequent death of Phillip 
White. In the video, Anonymous demanded Vineland authorities release the names of the 
officers involved in the incident and place them on administrative leave within 24 hours. 
When the group's demands were not met, it initiated doxing tactics and posted the home 
addresses, phone numbers, and emails of the mayor of Vineland and the officers. 

- This year, Anonymous launched a separate but related campaign known as 
"OpCodeBlue," which aims to gather information on law enforcement agencies it deems 
corrupt to support future doxing attacks. 

- In December, the NJ Cybersecurity and Communications Integration Cell (NJCCIC) at the 
NJ Regional Operations Intelligence Center (ROIC) released a report recommending that 
all law enforcement officers and public safety officials in New Jersey take proactive steps 
to limit their online presence and to remove personally identifiable information from social 
media sites. 


Contact Information 

The NJCCIC and OHSP CTWatch at the ROIC are establishing persistent social media 
monitoring of identified hacktivist actors and will proactively notify any future targets of 
potential hacktivist activities. Any agency with comments or questions about this document 
should contact the NJCCIC at (609) 963-6900 ext. 6249 or at cyber@qw.nisp.org . 


This document was prepared at the direction of the New Jersey Office of Homeland Security and Preparedness pursuant to its authority under Executive Order No. 5 of 16 March 2006, and 
to provisions of the New Jersey Domestic Security Preparedness Act. Information contained in this document is FOR OFFICIAL USE ONLY and may only be shared with or distributed to law 
enforcement agencies and personnel. This document contains confidential, sensitive homeland security information that shall not be deemed to be public record under the provisions of P.L, 
1963, c. 73 (c.47:1 A-1, et seq.) or the common law concerning access to public records. Dissemination, distribution or copying of this communication and any attachments hereto by 
individuals not explicitly specified as an intended recipient of this communication is strictly prohibited. 
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